Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a6000r_firmware:1.0.1-b20201211.2000:*:*:*:*:*:*:*

part: o version: 1.0.1-b20201211.2000 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA6000R Firmware (d24772b0-4b31-599e-980d-a9ed97506961)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3249 vulnerable 2026-06-08 07:23:08.540897 TOTOLINK A6000R mtkwifi.lua apcli_cancel_wps command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-04T14:00:15.508Z
Updated: 2025-04-04T14:29:11.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57214 vulnerable 2026-06-08 06:56:13.417904 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-14T16:57:39.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57213 vulnerable 2026-06-08 06:56:13.417489 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-13T15:41:01.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57212 vulnerable 2026-06-08 06:56:13.416806 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-14T15:26:01.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57211 vulnerable 2026-06-08 06:56:13.415460 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-15T20:27:42.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41320 vulnerable 2026-06-08 06:43:54.350213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41319 vulnerable 2026-06-08 06:43:54.349849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41318 vulnerable 2026-06-08 06:43:54.349170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41317 vulnerable 2026-06-08 06:43:54.348699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41316 vulnerable 2026-06-08 06:43:54.348016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41315 vulnerable 2026-06-08 06:43:54.338907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41314 vulnerable 2026-06-08 06:43:54.337013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37626 vulnerable 2026-06-08 06:39:47.991552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.